Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Filter sensitive query string parameters in the log [#6244 state:committed] | Prem Sichanugrist & Xavier Noria | 2011-03-11 | 1 | -4/+17 | |
| | | | | | | This provides more safety to applications that put secret information in the query string, such as API keys or SSO tokens. Signed-off-by: Xavier Noria <fxn@hashref.com> | |||||
* | Filter params that return nil for to_param and allow through false values | Andrew White | 2011-03-09 | 1 | -1/+1 | |
| | ||||||
* | stop being clever and just call methods on the Route object | Aaron Patterson | 2011-03-08 | 2 | -1/+4 | |
| | ||||||
* | Improve testing of cookies in functional tests: | Andrew White | 2011-03-06 | 2 | -2/+7 | |
| | | | | | | | | | - cookies can be set using string or symbol keys - cookies are preserved across calls to get, post, etc. - cookie names and values are escaped - cookies can be cleared using @request.cookies.clear [#6272 state:resolved] | |||||
* | Raise ArgumentError if route name is invalid [#6517 state:resolved] | Andrew White | 2011-03-06 | 1 | -0/+2 | |
| | ||||||
* | Action Pack typos. | R.T. Lechow | 2011-03-05 | 1 | -2/+2 | |
| | ||||||
* | make sure string keys are always looked up from the class cache | Aaron Patterson | 2011-03-02 | 1 | -2/+3 | |
| | ||||||
* | use newer class cache api | Aaron Patterson | 2011-03-02 | 1 | -1/+1 | |
| | ||||||
* | yo dawg, directly use the class cache rather than the cache of the cache | Aaron Patterson | 2011-03-01 | 1 | -1/+2 | |
| | ||||||
* | refactor Reference to a ClassCache object, fix lazy lookup in Middleware so ↵ | Aaron Patterson | 2011-03-01 | 2 | -5/+13 | |
| | | | | that anonymous classes are supported | |||||
* | initialize ivars | Aaron Patterson | 2011-03-01 | 1 | -1/+1 | |
| | ||||||
* | Enumerable gives us include?, so remove include? | Aaron Patterson | 2011-03-01 | 1 | -4/+0 | |
| | ||||||
* | prefer composition over inheritance with AD::MS | Aaron Patterson | 2011-03-01 | 1 | -8/+37 | |
| | ||||||
* | Revert "compute ext in initialize, and use an attr_reader" | Aaron Patterson | 2011-02-28 | 1 | -5/+7 | |
| | | | | | | | | This reverts commit 2dbb73bdda3b81947fd112486ac4285fb1a6e3a9. Conflicts: actionpack/lib/action_dispatch/middleware/static.rb | |||||
* | no need to pass a regex to Regexp.compile | Aaron Patterson | 2011-02-28 | 1 | -4/+4 | |
| | ||||||
* | compute ext in initialize, and use an attr_reader | Aaron Patterson | 2011-02-28 | 1 | -7/+5 | |
| | ||||||
* | Fix named route helper for routes nested inside deeply nested resources | Andrew White | 2011-02-14 | 1 | -1/+1 | |
| | | | | [#6416 state:resolved] | |||||
* | Add notes on how to override the default :id constraint [#5994 state:resolved] | Andrew White | 2011-02-14 | 1 | -1/+8 | |
| | ||||||
* | Remove incorrect assert_recognizes example | Andrew White | 2011-02-13 | 1 | -3/+0 | |
| | ||||||
* | Fix assert_recognizes with block constraints [#5805 state:resolved] | Andrew White | 2011-02-13 | 3 | -6/+13 | |
| | ||||||
* | Add missing deprecation require | Carlos Antonio da Silva | 2011-02-11 | 1 | -0/+1 | |
| | | | | Signed-off-by: Santiago Pastorino <santiago@wyeworks.com> | |||||
* | Change the CSRF whitelisting to only apply to get requests | Michael Koziarski | 2011-02-08 | 1 | -1/+2 | |
| | | | | | | | | Unfortunately the previous method of browser detection and XHR whitelisting is unable to prevent requests issued from some Flash animations and Java applets. To ease the work required to include the CSRF token in ajax requests rails now supports providing the token in a custom http header: X-CSRF-Token: ... This fixes CVE-2011-0447 | |||||
* | Use Mime::Type references. | José Valim | 2011-02-08 | 1 | -1/+5 | |
| | ||||||
* | Merge branch 'master' of git://github.com/lifo/docrails | Xavier Noria | 2011-02-05 | 1 | -17/+39 | |
|\ | ||||||
| * | improve routing docs, mostly for #match | Gabriel Horner | 2011-02-05 | 1 | -12/+34 | |
| | | ||||||
| * | keep options titles consistent to "Options" | Gabriel Horner | 2011-02-03 | 1 | -5/+5 | |
| | | ||||||
* | | fixed bug with nested resources within shallow scope | german | 2011-02-04 | 1 | -1/+1 | |
| | | | | | | | | | | | | [#6372 state:committed] Signed-off-by: Santiago Pastorino <santiago@wyeworks.com> | |||||
* | | Protocol-relative URL support. | Stephen Celis | 2011-02-02 | 1 | -2/+5 | |
|/ | | | | | | [#5774 state:committed] Signed-off-by: Santiago Pastorino <santiago@wyeworks.com> | |||||
* | Merge branch 'master' of git://github.com/lifo/docrails | Xavier Noria | 2011-02-02 | 3 | -94/+194 | |
|\ | ||||||
| * | explain different ways to use match() | Jonathan Dance + Gabriel Horner | 2011-01-29 | 1 | -9/+16 | |
| | | ||||||
| * | organize and expand on options for routing methods | Jonathan Dance + Gabriel Horner | 2011-01-29 | 1 | -81/+161 | |
| | | ||||||
| * | corrected the location of status code symbols | misfo | 2011-01-29 | 1 | -1/+1 | |
| | | ||||||
| * | add cross-references and documentation for scope | Jonathan Dance + Gabriel Horner | 2011-01-28 | 1 | -0/+12 | |
| | | ||||||
| * | fix cross-references in HttpHelper methods | Jonathan Dance + Gabriel Horner | 2011-01-28 | 1 | -4/+4 | |
| | | ||||||
| * | clarify what the "they" that are is and what the "are" in question is | Matt Jankowski | 2011-01-27 | 1 | -1/+2 | |
| | | ||||||
* | | Use run_callbacks; the generated _run_<name>_callbacks method is not a ↵ | John Firebaugh | 2011-01-31 | 2 | -5/+5 | |
| | | | | | | | | | | | | public interface. Signed-off-by: Santiago Pastorino <santiago@wyeworks.com> | |||||
* | | Add tld_length option when using domain :all in cookies | brainopia | 2011-01-21 | 1 | -9/+9 | |
| | | | | | | | | Signed-off-by: José Valim <jose.valim@gmail.com> | |||||
* | | Support list of possible domains for cookies | brainopia | 2011-01-21 | 1 | -0/+3 | |
|/ | | | | Signed-off-by: José Valim <jose.valim@gmail.com> | |||||
* | removing more unused variables | Aaron Patterson | 2011-01-17 | 1 | -1/+1 | |
| | ||||||
* | use raise to create exceptions and to set the backtrace | Aaron Patterson | 2011-01-12 | 2 | -2/+2 | |
| | ||||||
* | reraising should be in the rescue block | Aaron Patterson | 2011-01-12 | 1 | -1/+1 | |
| | ||||||
* | Refactor to handle the X-Cascade without having to raise an exception | Krekoten' Marjan | 2011-01-09 | 1 | -12/+12 | |
| | ||||||
* | render :template is faster than render :file | Santiago Pastorino | 2011-01-01 | 2 | -5/+4 | |
| | ||||||
* | This is not needed anymore | Santiago Pastorino | 2011-01-01 | 1 | -3/+0 | |
| | ||||||
* | Don't deprecate to_prepare. | José Valim | 2010-12-23 | 1 | -4/+4 | |
| | ||||||
* | Clean up callbacks should also be called on exceptions. | José Valim | 2010-12-23 | 1 | -0/+3 | |
| | ||||||
* | Typo (request -> response) | John Firebaugh | 2010-12-21 | 1 | -1/+1 | |
| | ||||||
* | Expand ActionDispatch::Reloader docs | John Firebaugh | 2010-12-21 | 1 | -6/+14 | |
| | ||||||
* | Small changes on AD::Reloader. | José Valim | 2010-12-20 | 1 | -20/+3 | |
| | ||||||
* | Replace AD::Callbacks.to_prepare with AD::Reloader.to_prepare | John Firebaugh | 2010-12-20 | 1 | -25/+6 | |
| | | | | Signed-off-by: José Valim <jose.valim@gmail.com> |